Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/743f51-8454-436f-988c-505b4b834b26/1/nFHtFVkIhTIoFSbgQoI4vcF7RDE.roa
File:                     nFHtFVkIhTIoFSbgQoI4vcF7RDE.roa (raw, json)
Hash identifier:          Q12vdbRxCcQNmm2Hpz4KI6QC/Lt/tpfE/dCns5j/iB0=
Subject key identifier:   9C:51:ED:15:59:08:85:32:28:15:26:E0:42:82:38:BD:C1:7B:44:31
Certificate issuer:       /CN=ca8d3afd322395565b0ed519a583f5eff8a4945f
Certificate serial:       01856FF055983CCA986F0C1C468A94C2D64F
Authority key identifier: CA:8D:3A:FD:32:23:95:56:5B:0E:D5:19:A5:83:F5:EF:F8:A4:94:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yo06_TIjlVZbDtUZpYP17_iklF8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/743f51-8454-436f-988c-505b4b834b26/1/nFHtFVkIhTIoFSbgQoI4vcF7RDE.roa
Signing time:             Mon 02 Jan 2023 00:44:59 +0000
ROA not before:           Mon 02 Jan 2023 00:44:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     41960
IP address blocks:        185.112.64.0/22 maxlen: 24
                          2a0a:1fc0::/29 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:f0:55:98:3c:ca:98:6f:0c:1c:46:8a:94:c2:d6:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca8d3afd322395565b0ed519a583f5eff8a4945f
        Validity
            Not Before: Jan  2 00:44:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9c51ed1559088532281526e0428238bdc17b4431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:2d:3d:e3:76:f1:ba:b6:2d:ce:c3:f4:c3:40:
                    b4:14:a6:34:5c:69:34:15:8c:24:d4:92:b9:03:27:
                    44:fb:44:7b:87:aa:d1:9b:0d:f9:d1:45:da:0e:71:
                    02:7a:c6:8c:a2:ac:28:9c:0f:6c:ed:93:81:5e:c3:
                    bf:5c:c2:04:e0:74:44:a8:d3:3a:f7:fa:d5:26:ef:
                    f6:04:02:c7:64:d4:4f:7e:99:2e:cc:ea:f7:32:89:
                    7a:1a:24:14:24:4c:9f:64:b0:e9:ef:3e:d3:67:17:
                    93:d1:14:26:ea:6b:d1:65:d2:32:d3:53:8c:2f:61:
                    47:a0:69:43:ad:b6:1f:40:37:4b:7a:66:79:a9:f4:
                    2c:56:fa:e7:1c:af:90:f4:0d:e4:c6:c8:01:b4:61:
                    ba:b3:d3:33:c3:80:14:38:4d:ef:bb:24:c6:2b:25:
                    db:c2:41:96:23:ef:22:ce:a5:55:46:19:b9:5c:05:
                    67:2b:74:c2:e8:00:67:e4:f5:7a:c8:e8:94:bc:73:
                    21:cf:f2:54:2e:12:81:df:d1:46:f8:19:22:50:ee:
                    cf:a9:8a:2c:6d:fb:d2:68:e2:be:87:9e:31:07:01:
                    6f:4e:02:11:e3:78:9c:20:da:f0:dd:81:d6:86:58:
                    24:ef:56:84:15:07:e6:6b:80:1b:e4:f9:b7:b2:d5:
                    e9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:51:ED:15:59:08:85:32:28:15:26:E0:42:82:38:BD:C1:7B:44:31
            X509v3 Authority Key Identifier:
                keyid:CA:8D:3A:FD:32:23:95:56:5B:0E:D5:19:A5:83:F5:EF:F8:A4:94:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yo06_TIjlVZbDtUZpYP17_iklF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/743f51-8454-436f-988c-505b4b834b26/1/nFHtFVkIhTIoFSbgQoI4vcF7RDE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/743f51-8454-436f-988c-505b4b834b26/1/yo06_TIjlVZbDtUZpYP17_iklF8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.112.64.0/22
                IPv6:
                  2a0a:1fc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         46:1c:db:05:92:16:e6:9f:0a:7c:66:04:40:83:68:6e:33:94:
         77:87:8e:17:e0:85:50:5c:18:1a:e5:69:85:e7:d3:09:18:d3:
         67:91:16:aa:7d:92:64:b7:11:bb:e4:80:db:99:a3:47:13:f8:
         87:65:bf:df:5e:78:7d:28:0a:dd:64:76:3a:9e:84:99:4a:2e:
         27:81:1a:32:92:6f:e2:87:aa:67:57:5b:19:eb:cb:3e:29:98:
         56:57:29:4e:14:8c:44:e7:17:ff:d9:fb:8a:fa:16:28:9d:e8:
         bc:be:4d:e1:db:0d:7a:f3:b0:da:aa:2b:83:67:b7:1d:7b:92:
         4f:c8:91:cf:3f:30:2c:67:97:68:0d:a5:22:2b:64:60:f4:5a:
         d0:57:d4:15:65:85:e3:7a:5d:e1:9f:1a:aa:44:f2:b0:b9:14:
         1c:56:df:03:f0:8f:85:67:5e:a1:72:20:10:01:c9:4a:01:2e:
         4f:99:c7:ac:e7:ab:a6:2a:e2:06:11:ec:68:65:ff:59:2d:1e:
         b4:34:c3:fa:13:e5:82:cf:6f:d1:5c:b9:09:df:89:2e:ae:3a:
         ff:0b:8d:c9:cb:4d:66:99:8e:c1:66:e3:ec:1b:1d:6d:61:70:
         2b:c3:e0:76:b5:4d:a1:3a:82:69:78:ab:14:9f:25:6d:54:a8:
         25:a9:e9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----